R1(config)#crypto pki enroll CA-TP
%%Start certificate enrollment ..%Create a challenge password.You will need to verbally provide this
password to the CA Administratorin order to revoke your certificate.For security reasons your password will not be saved in the configuration.Please make a note of it.Password:Re-enter password:%The subject name in the certificate will include: R1.microblog.com
%Include the router serial number in the subject name?[yes/no]:no%Include an IP address in the subject name?[no]:Request certificate from CA?[yes/no]: yes
%Certificate request sent to CertificateAuthority%The'show crypto pki certificate verbose CA-TP' commandwill show the fingerprint.
R1(config)#*Dec1423:27:02.793: CRYPTO_PKI:CertificateRequestFingerprint MD5:88143201 DDC5FB8E B32D16EB 23AEDA7A*Dec1423:27:02.797: CRYPTO_PKI:CertificateRequestFingerprint SHA1: F58EB09D 172C2D3B69941ED21793508E882F0E6A
R1(config)#*Dec1423:27:08.405:%PKI-6-CERTRET:Certificate received fromCertificateAuthority
R1(config)#